Method and system for secured inter-application communication in mobile devices

Patent metadata

Field	Value
Publication number	US-9442778-B2
Application number	US-201314036106-A
Country	US
Kind code	B2
Filing date	Sep 25, 2013
Priority date	Oct 1, 2012
Publication date	Sep 13, 2016
Grant date	Sep 13, 2016

Abstract

This disclosure describes a method for accessing network resources which includes receiving by a first application in a mobile computing device sign-in information from a user and enabling the user to sign in to a second application with the first application to access network resources from a resource server based on (a) a first application identification (ID) of the second application, (b) the user authorizing the second application to the resource server, and (c) receiving an authorization grant from the resource server to enable the second application to access the network resources, the mobile computing device coupled with the resource server via a network.

First claim

The invention claimed is:

1. A method for secured inter-application communication, comprising:
requesting, by a first application running on a mobile computing device, that a first socket be opened by an operating system of the mobile computing device, the first socket being associated with the first application;
receiving, by the first application, an identifier of the first socket from the operating system, the identifier being a first port ID associated with the mobile computing device and defining an endpoint of the first socket;
requesting, by the first application, that a second application running on the mobile computing device be provided with the first port ID;
requesting by the second application, in response to receiving the first port ID, that a second socket be opened by the operating system of the mobile computing device, the second socket being associated with the second application;
receiving, by the second application, an identifier of the second socket from the operating system, the identifier being a second port ID associated with the mobile computing device and defining an endpoint of the second socket;
requesting by the second application, in response to receiving the first port ID, that the second socket be coupled to the first socket;
establishing a bi-directional channel via the first and second sockets; and
transferring information from the first application to the second application via the bi-directional channel, the information causing functions of the second application to be made available via an interface of the first application.

2. The method of claim 1 , further comprising communicating information about the second socket to the first application.

3. The method of claim 2 , further comprising:
transferring information from the second application to the first application using the bi-directional channel, the information from the second application comprising a functionality of the second application that is not included in the first application.

4. The method of claim 3 , wherein the transferring information from the second application to the first application comprises:
launching the second application in the foreground on the mobile computing device, thereby transferring control of an event from the first application to the second application;
placing the first application in an event loop until the event is completed; and
returning the first application to the foreground on the mobile computing device in response to the completion of the event.

5. The method of claim 1 , wherein the first application is running in the foreground on the mobile computing device and the second application is running in the background, wherein a user can only interact with a mobile application running in the foreground on the mobile device.

6. A computer program product comprising a non-transitory computer readable medium having computer-readable program instructions embodied therein, the computer readable program instructions adapted to be executed by one or more processors to implement a method for secured inter-application communication, the program instructions include:
requesting, by a first application running on a mobile computing device, that a first socket be opened by an operating system of the mobile computing device, the first socket being associated with the first application;
receiving, by the first application, an identifier of the first socket from the operating system, the identifier being a first port ID associated with the mobile computing device and defining an endpoint of the first socket;
requesting, by the first application, that a second application running on the mobile computing device be provided with the first port ID;
requesting, by the second application, in response to receiving the first port ID, that a second socket be opened by the operating system of the mobile computing device, the second socket being associated with the second application;
receiving, by the second application, an identifier of the second socket from the operating system, the identifier being a second port ID associated with the mobile computing device and defining an endpoint of the second socket;
requesting, by the second application, in response to receiving the first port ID, that the second socket be coupled to the first socket;
establishing a bi-directional channel via the first and second sockets; and
transferring information from the first application to the second application via the bi-directional channel, the information causing functions of the second application to be made available via an interface of the first application.

7. The computer program product of claim 6 , further comprising communicating information about the second socket to the first application.

8. The computer program product of claim 6 , further comprising:
transferring information from the second application to the first application using the bi-directional channel, the information from the second application comprising a functionality of the second application that is not included in the first application.

9. The computer program product of claim 8 , wherein the transferring information from the second application to the first application comprises:
launching the second application in the foreground on the mobile computing device, thereby transferring control of an event from the first application to the second application;
placing the first application in an event loop until the event is completed; and
returning the first application to the foreground on the mobile computing device in response to the completion of the event.

10. The computer program product of claim 6 , wherein the first application is running in the foreground on the mobile computing device and the second application is running in the background, wherein a user can only interact with a mobile application running in the foreground on the mobile device.

Assignees

• Salesforce Com Inc

Inventors

• Desai Sachin
• Liu Qingqing
• Fischer Ronald

Classifications

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/0815 Primary

  providing single-sign-on or federations · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/126

  the source of the received data · CPC title

• G06F9/544

  Buffers; Shared memory; Pipes · CPC title